AD Connect will sync your on-premises AD or AWS Managed Active Directory with Azure Active Directory. This allows you to provide a common identity for your users for Office 365, Azure, and SaaS applications integrated with Azure AD.
AD Connect Sync Features
Use Azure AD connect with ADFS to provide single sign on for Office365 users (password hash sync, pass-through authentication, federation with AD FS, or federation with PingFederate)
Filtering options on what to sync, filtering based on domains, OUs, or attributes.
Password hash synchronization synchronizes the password hash in Active Directory to Azure AD. The end-user can use the same password on-premises and in the cloud but only manage it in one location. Since it uses your on-premises Active Directory or AWS AD as the authority, you can also use your own password policy.
Password writeback will allow your users to change and reset their passwords in the cloud and have your on-premises password policy applied.
Device writeback will allow a device registered in Azure AD to be written back to on-premises Active Directory so it can be used for conditional access
The prevent accidental deletes feature is turned on by default and protects your cloud directory from numerous deletes at the same time. By default it allows 500 deletes per run. You can change this setting depending on your organization size.
Highlights
Sync your on-premises AD or AWS Managed Active Directory with Azure Active Directory
Enable single sign on to Office365 for your federated users
Enable 1 way or 2 way synchronization (Write back)
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour based on the EC2 instance type you run. Each dimension maps to a specific instance size, so pricing scales with the compute, memory, and storage of the hardware you pick. Smaller types like the t3 and t2 families cost less per hour, while larger multi-xlarge and metal types cost more. This software supports syncing your on-premises or AWS directory with Microsoft cloud identity services. You choose the instance that fits your workload, and the hourly software fee is added on top of the standard AWS infrastructure charge.
Top-of-mind questions for buyers
What do I get for the hourly rate on a given instance type?
Each dimension maps to one running EC2 instance of that size. The hourly software fee covers the preconfigured sync server image on that instance. An instance is the virtual machine with set CPU, memory, and storage. You run one instance per selected dimension and pay for each hour it runs.
Am I charged the hourly software fee when the instance is stopped?
The software fee meters running time. A fully stopped instance does not accrue the hourly software charge. Stopped instances may still incur standard AWS storage fees for attached volumes. The software fee resumes when you start the instance again.
How does the hourly software fee combine with the AWS infrastructure charge on my bill?
Two charges apply at the same time for the instance you run. The hourly software fee covers this preconfigured sync server image. The standard AWS infrastructure charge covers the underlying EC2 compute. Both scale with the instance size you pick and appear on the same invoice.
cloudinfrastructureservices.co.uk
Helpful?
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest OS patches installed. Simply run Windows update to install latest Microsoft OS patches
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Synchronizes on-premises Active Directory or AWS Managed Active Directory with Azure Active Directory
Single Sign-On Authentication
Supports single sign-on for Office 365 users through password hash sync, pass-through authentication, federation with AD FS, or federation with PingFederate
Selective Synchronization Filtering
Provides filtering options for synchronization based on domains, organizational units, or attributes
Bidirectional Password Management
Enables password hash synchronization to Azure AD and password writeback to apply on-premises password policies for cloud-based password changes and resets
Accidental Deletion Protection
Includes prevent accidental deletes feature enabled by default with configurable deletion threshold per synchronization run
Cloud Directory Identity Management
Centralize access across all identities with integrations to AWS Identity Center, Google Workspace, Microsoft 365, Active Directory, HRIS platforms, and network infrastructure resources
Single Sign-On and Multi-Factor Authentication
Frictionless, secure access to AWS resources and over 900 pre-built applications with automated user provisioning to Amazon IAM Identity Center and group-based permissions
Cross-Operating System Server and Device Management
Deploy, manage, and remotely assist AWS servers and corporate devices across Windows, macOS, iOS, Linux, AWS Linux AMIs, and Android from a single cloud platform
Passwordless and Conditional Access
Enable phishing-resistant access with passwordless SSO, password management, and conditional access controls to ensure only specific users on trusted devices and networks can access AWS resources
Unified Platform with Zero Trust Capabilities
Combine cloud directory identity management, access management, and cross-OS server and device management with enhanced IAM and device management controls to support Zero Trust security goals
Single Sign-On (SSO)
Automatically synchronizes users across multiple directories to enable one-click access to corporate applications on-premises and in the cloud with enforced security policies and self-service password reset capabilities.
Multi-Factor Authentication (MFA)
Supports multiple authentication methods including passwordless authentication, passkeys, one-time passcodes, push notifications, biometric data, and security keys with real-time reporting and monitoring of authentication events.
Adaptive Authentication
Delivers multi-layer, context-aware and risk-based protection to minimize common attacks and enforce contextual access security policies based on user behavior and risk assessment.
Identity Lifecycle Management
Provides role-based user provisioning engine with granular access permissions, least-privileged access controls, and automated user account provisioning across AWS services and third-party applications.
Directory Integration
Acts as a secure cloud-based directory with integration capabilities for Active Directory, LDAP, G Suite and other external directories, with pre-built connectors for thousands of third-party web applications and AWS services including AWS IAM, AWS SSO, Amazon Cognito, and Amazon EventBridge.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.